$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa File: 7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa (raw, json) Hash identifier: JCx4xC5QOPi9bQ+E8dfCEXO57NEPf4P8bmbXEPP1f1Q= Subject key identifier: 8A:91:0E:60:0E:DD:CC:74:39:C1:11:83:C3:53:5C:33:DB:E8:4A:30 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F5E62D042483FD1423D40B380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 202 IP address blocks: 20.149.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:d0:42:48:3f:d1:42:3d:40:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=3e6626b2-a524-4ba1-a7f5-8516d55c352c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:86:44:be:c9:a7:d0:03:59:a9:00:39:6c:72: ac:6b:1c:08:5d:bf:1c:e8:08:e9:ff:39:cd:e4:bd: 83:7d:ee:cf:f4:15:a1:86:dc:2f:c5:ab:04:57:2c: 38:d0:87:4b:19:9a:8e:78:72:d9:4f:20:fd:a6:53: 7e:07:f2:37:1a:f3:79:ed:14:43:e6:d4:cf:ea:6c: 66:f2:e2:18:30:98:00:3d:df:10:a2:96:54:88:f0: e8:ed:43:90:19:93:93:4a:bb:08:d2:6a:84:d2:e6: 7f:24:8d:2d:65:35:0f:27:0b:f8:c8:a8:b0:20:fd: cf:57:5f:aa:4f:ab:23:03:ea:c9:f8:93:19:07:54: a5:00:72:6a:0b:c3:2d:8a:05:96:dc:70:2a:cc:43: b7:cb:07:38:db:7f:ad:02:4f:da:40:1a:22:11:0f: 91:16:12:8e:ac:f7:41:95:0b:32:9d:1c:d1:0d:0a: ec:b6:62:bf:1d:23:7e:a6:19:f2:ef:18:f1:c0:5e: 8d:dd:f9:02:71:2c:d1:e5:cf:c0:9b:99:3b:bc:ad: 62:0b:c0:ae:53:b8:ed:f5:d4:8d:e5:34:ce:96:02: e6:cb:56:0c:6d:a5:0a:f1:97:d4:1f:5e:4f:16:54: 23:2e:29:2a:e6:1a:c7:a3:f3:d2:b8:05:02:dd:55: 75:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:91:0E:60:0E:DD:CC:74:39:C1:11:83:C3:53:5C:33:DB:E8:4A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ca:72:cf:e1:5c:b7:01:6d:b2:ec:7e:14:c2:74:83:cb:41: 82:27:c3:3f:71:1b:4c:81:51:07:38:73:32:fd:16:71:04:e9: f5:8d:83:57:8a:4e:d7:44:b9:d7:85:5a:43:51:af:10:8b:d6: a2:db:fd:18:6d:0d:ed:8d:ac:ba:f2:e4:3c:ac:70:b4:47:c5: ec:0e:e7:5b:aa:21:07:0d:85:3b:87:d8:3e:19:76:9b:97:16: 48:34:b0:81:f6:fe:fe:fa:9b:74:79:49:df:72:c0:7f:a6:6c: ee:2d:18:7c:8f:cd:4b:50:6d:8a:8c:01:3e:f6:5c:58:23:91: 5c:84:92:52:4c:87:80:5c:72:71:ac:60:e5:f9:69:95:60:ab: 91:5d:52:92:42:04:53:55:bf:10:ed:46:9e:6c:ec:ed:6d:e5: be:0d:50:d7:d4:83:93:90:06:a0:e7:07:fa:b8:79:4b:64:0f: 92:b1:ef:79:d5:ad:a8:c2:d7:62:84:80:c1:3b:8d:bc:29:84: 04:2c:3a:8c:17:84:c0:67:27:03:b5:5a:73:30:69:96:b9:af: 80:dd:5f:33:be:00:57:16:34:b2:96:a1:c5:10:e1:6e:6a:17: ed:96:e6:b7:00:4c:10:e8:38:2e:2e:08:e3:55:c4:2e:1c:6d: 1f:a6:f5:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtBCSD/RQj1As4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk M2U2NjI2YjItYTUyNC00YmExLWE3ZjUtODUxNmQ1NWMzNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIZEvsmn0ANZqQA5bHKsaxwIXb8c6Ajp/znN 5L2Dfe7P9BWhhtwvxasEVyw40IdLGZqOeHLZTyD9plN+B/I3GvN57RRD5tTP6mxm 8uIYMJgAPd8QopZUiPDo7UOQGZOTSrsI0mqE0uZ/JI0tZTUPJwv4yKiwIP3PV1+q T6sjA+rJ+JMZB1SlAHJqC8MtigWW3HAqzEO3ywc423+tAk/aQBoiEQ+RFhKOrPdB lQsynRzRDQrstmK/HSN+phny7xjxwF6N3fkCcSzR5c/Am5k7vK1iC8CuU7jt9dSN 5TTOlgLmy1YMbaUK8ZfUH15PFlQjLikq5hrHo/PSuAUC3VV17QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqRDmAO3cx0OcERg8NTXDPb6EowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2RhOGI2ZDUtYjliNS0z NjA0LTg5ZWItN2E5OTBmZDc2ODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7Kcs/hXLcBbbLsfhTCdIPLQYInwz9xG0yBUQc4czL9FnEE6fWNg1eK TtdEudeFWkNRrxCL1qLb/RhtDe2NrLry5DyscLRHxewO51uqIQcNhTuH2D4ZdpuX Fkg0sIH2/v76m3R5Sd9ywH+mbO4tGHyPzUtQbYqMAT72XFgjkVyEklJMh4BccnGs YOX5aZVgq5FdUpJCBFNVvxDtRp5s7O1t5b4NUNfUg5OQBqDnB/q4eUtkD5Kx73nV rajC12KEgME7jbwphAQsOowXhMBnJwO1WnMwaZa5r4DdXzO+AFcWNLKWocUQ4W5q F+2W5rcATBDoOC4uCONVxC4cbR+m9Zw= -----END CERTIFICATE-----Generated at Sun Oct 11 19:26:21 2026 by rpki-client